This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/b510b9db-75b1-4957-bf7f-f05c972c0bfd.roa
File:                     b510b9db-75b1-4957-bf7f-f05c972c0bfd.roa (raw, json)
Hash identifier:          OHkq/5tq7g3QZzTWiJ6A7tBHfENBe3VlCm/6Lgs37Ps=
Subject key identifier:   1C:77:23:26:B0:55:72:76:F6:AD:7E:53:B6:B3:84:54:C3:24:3A:7F
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       20C13800414DCA7C77B8698DB78342ABA9809B8A
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/b510b9db-75b1-4957-bf7f-f05c972c0bfd.roa
Signing time:             Wed 10 Dec 2025 00:50:06 +0000
ROA not before:           Wed 10 Dec 2025 00:50:06 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        96.127.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c1:38:00:41:4d:ca:7c:77:b8:69:8d:b7:83:42:ab:a9:80:9b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Dec 10 00:50:06 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=40c632201bb207562edc9c9a399047d205455cdb20800cef1eae0de45768dc80, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:c3:2e:13:95:57:73:42:c1:78:0d:5f:39:
                    3b:6d:02:73:52:78:a0:90:04:6c:19:69:d1:db:c1:
                    38:bf:a7:b2:e3:30:8f:d4:85:0f:bc:b6:15:94:8e:
                    be:a1:9d:5e:55:5a:33:e0:78:37:05:1d:85:f0:2d:
                    86:b9:91:b8:ef:1c:ab:31:77:2d:cb:6d:40:0c:ab:
                    5b:8d:9b:a9:50:4f:39:cf:ed:cd:af:68:cd:53:49:
                    9d:12:4b:20:20:50:55:af:e0:be:4f:ce:5c:bc:8f:
                    1f:1c:d5:27:54:a9:fb:35:10:1e:c6:a1:73:91:91:
                    ac:3b:7f:7d:44:07:eb:cf:79:dd:88:99:50:42:e6:
                    82:ca:f4:d7:b8:63:62:84:f9:09:b5:ec:6b:0d:3b:
                    0b:6e:8c:a4:87:28:64:14:bc:6b:44:33:fc:6a:39:
                    7d:06:8e:59:9e:8c:26:b1:88:b1:fd:35:56:0b:a0:
                    c9:99:a7:30:0f:01:b5:59:a8:65:86:6d:a5:59:79:
                    c3:c2:e8:85:5b:ab:c9:54:c4:8d:5a:31:4b:d4:19:
                    58:72:f7:42:92:93:92:07:44:fa:08:b3:52:cc:91:
                    81:99:c5:95:05:e1:60:33:f0:60:15:4d:37:f2:fc:
                    c6:99:5b:52:79:78:2e:82:a8:92:23:4d:50:fa:65:
                    88:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:77:23:26:B0:55:72:76:F6:AD:7E:53:B6:B3:84:54:C3:24:3A:7F
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/b510b9db-75b1-4957-bf7f-f05c972c0bfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:0b:56:9e:3d:56:01:70:60:b0:7e:5e:64:16:6b:69:05:3b:
         db:82:db:04:08:6a:22:43:fa:5f:50:0f:95:c5:1c:30:be:78:
         e5:a7:83:20:94:5a:11:88:99:60:ae:8f:c5:0a:05:10:d1:ff:
         69:37:ff:01:ba:24:be:bb:77:2e:b2:46:dc:01:ac:cf:67:7d:
         19:c8:e2:0b:df:27:c3:3e:36:5e:c5:3a:4b:55:77:4f:e4:9c:
         6f:c8:26:65:2e:ce:cb:b4:01:71:b8:c6:6c:57:10:0a:ac:ba:
         99:9f:0a:17:87:49:aa:4e:d2:fe:de:89:37:b9:d4:cd:dd:a3:
         12:1f:6c:98:7f:29:71:fb:47:19:55:2c:1f:41:8e:6d:92:d1:
         53:61:92:78:58:3a:46:8c:cd:81:e3:cc:c2:07:07:46:84:73:
         cf:69:9b:76:b3:95:a9:d8:0b:96:a3:9a:01:6a:c7:79:c8:e7:
         53:e3:0b:31:14:a0:82:fd:79:91:58:85:a6:da:ad:41:e6:ae:
         0d:2b:89:b6:09:50:64:d9:ee:1b:80:ac:18:bf:4c:11:ed:d5:
         02:4f:b6:80:1e:06:34:5f:bd:c2:0e:b0:5c:91:3a:e2:b2:09:
         4f:e1:34:ea:6b:e6:d9:34:47:0f:18:8f:96:f9:5f:55:a9:0d:
         9e:82:6e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 17:49:30 2025 by rpki-client